Malicious code in deneb-ursa-karma-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55b979dee2a65906b1f5f1bc4c9fc7201001a399c12ab05938d322fd1880481a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148009 Malicious code in slidev-mongoose-middleware-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e740fbc701afa1668b536493648225563f609e28680c2dced973d44fa761e5ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meissa-chai-rocket-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 032a50e4d51d72c2bb63fe8918f5ae6025b340e2c837756c4700830f6f596d09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enceladus-gemini-xml-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33afff028fbff8c3f87b0f9a396f96b1919f6780386b7fef8851a69e238f14fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in heka-jsonp-triton-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4442839a576bde6f5711839aebc86fbf239039a98fb50a343307fadc3dcc0e46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143439 Malicious code in hydra-duplex-ursa-less (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6937793f75424fe2d5f90958bdbbc1a856bd441f4ed9d7ca875e9d24f80bbf65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146513 Malicious code in prettier-stylelint-oauth-dagda-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a71ca9cf122bb124c897b6679bb61b645e6812b59362397a8c70fe9fb150c97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148423 Malicious code in sync-envconfig-apollo-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c0522e5416d0c39f55f4726793f21f5ee783f6cd714aa945b7a8b701df0ae65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147862 Malicious code in sequelize-auth0-publish-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7997c1594e3c8ca4516fdc5903416d5f8cdf4e40750e3fc69f596f4832c1ba3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147104 Malicious code in redis-install-xml-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d829a1e2ff41521392076b69e3c830de2f7537640987017337f47472c4500b85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147369 Malicious code in rest-ursa-chalk-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffa48b21337ae065011cc4a71ebeee38451dbc5d83d5039acf8de668c616f84f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carpo-frontend-callback-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 322ec4015b6527aab0c3603af097b5868aa95270eef43729041f984b436f921e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in promise-uglify-js-chalk-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d217294d5c2c2e64d732a8ea1fc726b9a504ae3f6a023ec18b1f4fe46edc6187 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in controversial_swan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d79e570ca284665fbf3a6b272ac98fb02c1248fc4b1a4fda79938d0339b328e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuni-bakwan8-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8331457c7d9fae3ee84566ce4395c50d86320a1de35a21da17737689bf65c7b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134001 Malicious code in hadianto-dradag43-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ace135ed98c227c7fc71af44605110e8d8894479ef2bb51ed8519418effdee5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-rojak90-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b54d93271efb4a4bd25686acdd85439deb12d8b11a41e2a106255b8a679a935 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alive_clownfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fff028edc6c1469089b43067b6832c1624e3bcb770dba54dd0c3990a6035d82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ideological_rat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dce9b775f1b5cdee3735f389577b892d9474181a8da89771331c20b9a6287154 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-buburayam48-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d732bbcc5d80d4bbc0bd7e33a81a1297621235b09d821f9efc26d2805495c0e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...